Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39fa496c-7384-466c-9076-7ecae53c1627.roa
File: 39fa496c-7384-466c-9076-7ecae53c1627.roa (raw, json)
Hash identifier: cZGuS6W3YRwiyebdWNi+G7pfBGNYXU+oahebRuNBUCE=
Subject key identifier: 50:4C:75:BF:D0:3A:00:DE:03:C5:8D:C7:3E:FA:12:70:6E:5E:48:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B7B5ED909911C0C1F0E51284DA3EB26F3FE203E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39fa496c-7384-466c-9076-7ecae53c1627.roa
Signing time: Sun 19 Oct 2025 01:20:51 +0000
ROA not before: Sun 19 Oct 2025 01:20:51 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7b:5e:d9:09:91:1c:0c:1f:0e:51:28:4d:a3:eb:26:f3:fe:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:20:51 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=183ef8f7c7b4dcb812d5eb46282d11c22ec37d451ee0a28af910aeb01d594c7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:1b:39:98:e5:1e:91:d4:12:18:40:cb:58:
1c:85:17:49:ae:02:8c:21:6b:a4:48:ae:0b:6c:20:
02:67:30:e0:cb:01:6a:c4:a8:09:dc:24:b1:23:7f:
87:23:79:70:eb:04:8b:5d:93:f7:22:8e:74:4f:a0:
ef:3d:72:f2:d1:6c:fe:ad:41:d2:99:15:a1:50:6b:
4c:37:f8:76:c7:36:55:fc:70:7b:b3:c9:86:55:1e:
19:a8:22:28:c6:1b:e0:61:63:b7:f6:c5:4c:13:40:
e2:eb:4c:40:77:d7:92:01:fa:a1:27:49:0a:76:45:
ca:48:a8:b4:a4:ae:d9:ab:82:fe:b8:7e:a9:08:92:
24:7b:ca:d5:f5:1d:ae:98:00:64:d3:0c:38:4b:76:
04:07:7a:ff:39:c1:3d:56:b1:b8:8f:43:4a:06:88:
51:9b:50:47:ce:64:9c:53:08:35:f0:45:c0:d6:80:
3a:61:e8:23:dc:90:2a:74:0f:c9:c2:95:ae:52:b2:
c1:77:af:bc:84:50:e0:4a:55:aa:1e:c9:71:62:7f:
59:bb:ba:4e:0c:78:7f:f8:a8:29:d2:7c:42:4a:41:
f7:04:26:4c:fb:02:b4:dc:80:e7:08:17:31:93:14:
d5:25:f7:c5:b2:08:3f:73:28:d9:ba:b4:01:f9:14:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4C:75:BF:D0:3A:00:DE:03:C5:8D:C7:3E:FA:12:70:6E:5E:48:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39fa496c-7384-466c-9076-7ecae53c1627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.229.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:dc:fb:12:71:59:e3:68:10:c6:9d:45:e0:f5:ab:77:14:9c:
98:b1:4f:c1:c4:5e:84:75:b0:e9:0a:a8:4b:ca:28:4c:da:a0:
76:bb:db:1b:73:fc:72:97:48:4d:33:c0:96:1d:8a:57:b9:25:
50:1c:cd:8c:1a:06:91:4e:14:c8:2c:03:45:33:b6:75:2e:f2:
8e:9d:4f:9c:79:86:00:6b:58:6f:af:9e:cc:90:e1:80:26:17:
be:89:54:73:82:f0:06:f9:90:cd:75:b9:37:7b:e5:ec:1e:51:
02:1c:a7:ff:8b:56:2b:b9:a8:f0:96:c3:25:56:73:07:fe:07:
82:0e:ff:71:f5:88:b2:9c:13:5a:5a:b5:20:33:ea:62:d7:6e:
21:28:ee:06:30:cc:eb:78:9f:7b:a8:a7:2d:e0:87:2b:5c:9c:
e9:60:3f:58:6d:3a:2b:3e:0a:1f:84:f5:74:39:5c:37:88:71:
ab:a0:fc:da:6d:cd:6c:74:4a:e7:f8:37:01:3b:22:3b:1d:61:
e0:3c:04:99:e2:0a:17:ce:0a:53:76:d6:69:25:7f:5b:a3:6a:
ff:b0:67:b4:55:41:76:04:5c:a1:fd:61:62:1a:79:08:88:e2:
a7:c5:b7:24:0b:8a:c4:e4:ea:27:48:6f:ee:7b:92:62:e8:64:
15:cd:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:43 2025 by rpki-client